Why “Aadhaar Data Vault”?

You know what is Aadhaar, why is it needed ….. You should also know how secure it is ?

Till now, a person had to give his/her 12-digit identity number along with other attributes (demographic and/or biometrics and/or through a one-time password) during authentication or e-KYC (know your customer) for accessing various benefits and services from service providers such as banks or telcos.

Aadhaar number is been used as a primary ID of the residents. UIDAI has been under the scanner over the past few months over allegations of access of personal information by random entities without the consent of individual Aadhaar holders.

In order to enhance the security level of the storing the Aadhaar numbers, it has been mandated to all entities that are collecting and storing the Aadhaar numbers for specific purposes under the Aadhaar Act 2016, shall start using reference keys mapped to Aadhaar numbers through tokenization in all systems

In order to achieve the said objective is introduced “Aadhaar Data Vault”.

Aadhaar Data Vault is a centralized storage for all the Aadhaar numbers collected by the AUAs/KUAs/Sub-AUAs/ or any other agency for specific purposes. It is a secure system inside the respective agency’s infrastructure accessible only on need to know basis.

Aadhaar Data vault is a concept for storage of Aadhaar numbers in one particular storage within the environment of the organization to reduce the footprint of Aadhaar numbers. Specifications of UIDAI may be referred for algorithm and key length such as Auth api specifications or eKYC api specifications where it states RSA 2048 for Public key encryption and AES 256 for symmetric encryption

In order to store these keys and for encryption purpose what is required is HSM – Hardware Security Module.

JISA Softech Pvt. Ltd., a young Information Technology company providing various Authentication Products and Solutions. “JISA has an entire range of software applications based on cryptographic algorithms and protocols”

One of the solutions Jisa offers is JVault (Aadhaar Data Vault).

JISA’s Aadhaar Data Vault solution is the complete software package that is needed to implement Aadhaar Data Vault within your organization. The software exposes REST APIs that can be used to easily integrate with existing software services. The package supports database encryption for data protection with HSM integration and also leads to following benefits.